claws-temple-bounty-bf2756 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claws-temple-bounty-bf2756 (Agent Skill) and scored it 65/100 (yellow). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 12 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 12 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this directory as the canonical claws-temple-bounty skill package.
0.2.19This skill is an orchestration layer for the five-task Claws Temple path:
This skill does not re-implement the underlying capabilities. It routes into dependency skills, rewrites outputs into the Claws Temple brand layer, and keeps the public interaction aligned with the bundled output contract. Task 4 is handled as a native platform handoff instead of a local completion state machine.
Before answering, load these files in this order:
references/host-runtime-contract.mdreferences/output-contract.mdreferences/brand-lexicon.zh.md for zh-CNreferences/brand-lexicon.en.md for enreferences/task-flows/Resolve output_language before rendering:
zh-CNenKeep all visible fixed strings monolingual after selection.
Treat references/host-runtime-contract.md as the runtime gate before any dependency-heavy task.
Host rules:
Use these dependencies explicitly when the relevant task is requested:
agent-spectrumresonance-contract version >= 4.0.0tomorrowdao-agent-skills version >= 0.2.2 plus portkey-ca-agent-skills version >= 2.3.0https://www.shitskills.net/skill.mdresonance-contract version >= 4.0.0 when a direct partner or pairing signal is needed; otherwise this skill may draft copy directlyDependency rule:
agent-spectrum, do not generate any hexagon, coordinate card, type result, or faction mapping from memory; return only preflight, install guidance, or blocker stateskills/claws-temple-bounty/scripts/self-heal-local-dependency.sh when the current host can run shell commands inside this repositoryskills/claws-temple-bounty/config/dependency-sources.jsonCLAWS_TEMPLE_AGENT_SPECTRUM_SOURCECLAWS_TEMPLE_RESONANCE_CONTRACT_SOURCECLAWS_TEMPLE_TOMORROWDAO_SOURCECLAWS_TEMPLE_PORTKEY_CA_SOURCEidentity entry is already open and whether they are currently signed in before pairing continuesidentity entry path or is not currently signed in, route them into the smoother identity-entry path firstuser ID from the dependency context instead of asking the user to type it manuallyuser ID when the current-turn dependency result actually returned that value; never reuse remembered values, example literals, or placeholders as if they were real runtime outputuser ID successfully, the default visible layer may show the full resolved value as a Task 2-only exception so the queue path can be confirmeduser ID still cannot be auto-resolved after onboarding, keep the user in the identity-entry or recovery path; do not ask the user to paste their own user IDuser IDtargeted match maps to the dependency's direct-pair path and requires the other user's user IDopen partner search maps to the dependency's automatic queue path and can continue only after the current user's user ID is auto-resolvedresonance-contract is missing or below 4.0.0, first try install or upgrade from the dependency source catalog; do not ask the user to provide an install sourceemail, Address, nickname, or similar non-user ID input for targeted match, correct the input and offer either provide the other user's user ID or switch to open partner searchuser ID, targeted match, open partner search, Telegram, and XCA only, counterparty_ca_hash, and queue in maintainer-facing details; the default visible layer should call the identifier user IDconfig/faction-proposals.json, including the TomorrowDAO minimum dependency version, the Portkey CA write minimum dependency version, token-balance precheck, token-allowance precheck, approve payload fields, vote payload fields, and success Telegram follow-upbash, python3, dependency skill roots, and local CA context are ready; otherwise fall back to lower-level dependency choreography or a host-capability blockerskills/claws-temple-bounty/scripts/task3-oath-executor.sh so weaker models do not have to hand-orchestrate the whole CA vote pathpassword_required, waiting_for_tokens, submitted, completed, and blocked statepassword_required, waiting_for_tokens, submitted, and completed as structured helper outcomes rather than shell failures; only true hard blockers should surface as non-zero helper exitvote_payload.proposal_id_field = proposalId as the dependency-tool input alias for tomorrowdao_dao_vote, not as a raw contract ABI field nametomorrowdao_dao_vote, pass the configured proposalId field and let the dependency normalize it to the underlying votingItemId; do not raw forward-call Vote with an unnormalized proposalId payloadtomorrowdao_token_approve --mode simulate to derive the exact token Approve payload, and use tomorrowdao_dao_vote --mode simulate to derive the exact normalized Vote payload before any CA writeCA-only + AI-only completion as the execution policy; do not offer a user-facing manual path, app handoff, or non-CA routeCA context is present but the keystore password is not yet available, ask the user for the CA keystore password only once and then continue automaticallyAIBOUNTY balance is confirmed to be at least the configured vote amountCA signer before any write; if the current signer is not CA or no usable CA context is ready, stop with a branded blocker instead of switching execution routesCA context unlocks a manager key, treat that key only as part of the verified CA write path; it must not authorize direct target-contract send by itselfCA, check the current AIBOUNTY allowance against the current vote contract before sending the voteApprove payload through TomorrowDAO simulate and send it through portkey_forward_call, then keep that same verified CA forward transport as the preferred path for the later VoteVote payload through TomorrowDAO simulate and send that normalized payload through portkey_forward_call; do not let the CA path fall back to TomorrowDAO direct sendCA write transport for both Approve and Vote; do not mix a successful CA approval path with a different direct vote path unless the same transport is unavailableCA is selected, direct target-contract send and env or private-key fallback are forbidden; if TomorrowDAO direct send returns SIGNER_CA_DIRECT_SEND_FORBIDDEN, continue through the explicit Portkey CA forward transport instead of stoppingCA transport blocker only when the explicit Portkey CA forward transport is unavailable, below minimum version, or cannot continue automatically in the current hostApprove and Vote; do not ask the user whether they want manual completion or another retryNODEVALIDATIONFAILED with Insufficient allowance after allowance is already sufficient, treat that as a transport mismatch and switch back to the same verified CA write transport used by Approveproposal my-info as an auxiliary reconciliation source only; primary confirmation should come from mined receipts, vote logs, and allowance or balance deltastxId; if reconciliation confirms progress without a correlated final txId, keep the state in submitted instead of declaring completionskill.md URL, and do not assume OpenClaw can load the remote URL directlypublishGitHub repository URL plus any native required fields such as installType, installCommand, or installUrl only when the user chooses publish or another action that actually needs themGitHub repo URL, missing content fields, or an unchosen action as checklist gaps, not support blockersTelegram or X, first say that the agent will draft the message first and will continue direct send only if the current host really has the required permissions and capability; otherwise the final send step belongs to the userOpenClaw, the user has already chosen Telegram or X, the user explicitly wants to send now, and the current turn has already confirmed browser capability, the visible layer may mention browser action only as a conditional convenience after that host-capability caveatOpenClawFor a generic bounty request, do not jump straight into a single task.
The agent must first:
Then route to the correct task.
Read references/task-flows/task-roadmap.md when:
Read references/task-flows/task-1-coordinate-card.md when:
Task 1Read references/task-flows/task-2-resonance-partner.md when:
Task 2Read references/task-flows/task-3-faction-oath.md when:
Task 3Read references/task-flows/task-4-curio-board.md when:
Task 4Read references/task-flows/task-5-social-signal.md when:
Task 5Task 3 must always read config/faction-proposals.json before presenting faction choices or executing the oath flow.
Hard requirements:
environment = production and is_test_only = false, treat the config as the formal Task 3 mapping in both maintainer-facing details and the default visible layerDo not trigger this skill when:
Task 1, Task 2, or similar without any Claws Temple / 龙虾圣殿 / bounty-path contextaelf, Web3, blockchain, chain, wallet, 区块链, 链, 链上, or 钱包 in the default visible layer.user ID in the default visible layer as a controlled exception for queue readiness confirmation.Portkey App, EOA, ManagerForwardCall, manual fallback, or raw spender addresses in the default visible layer.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.